BASIC question, but still having conceptual issues

Alan DeKok aland at
Sat Aug 29 11:02:03 CEST 2009

Gary Gatten wrote:
> I have several different type's of clients/NAS's that will be using FR
> as the Front End to perform AAA - mostly Authentication, but the Author
> and Acct are close behind.

  Use virtual servers.  See raddb/sites-available/README

> Anyway, each of these clients need to perform slightly different backend
> queries to determine if Authenticate should pass or fail:
> So, how do I go about this?

  Configure completely different virtual servers, even if the contents
of those servers are mostly the same.

  This lets you work like each type of NAS has it's own RADIUS server,
with it's own policies.

>  I'm currently using NTLM_Auth and that's
> all working fine, I'm just not sure how to say in FR config: if request
> of type 1, run this NTLM_Auth command and check for this group; If
> request of type 2 run this other NTLM_Auth command and check for this
> other group.

  You'll also need to configure different instances of the MSCHAP
module, too.

  Alan DeKok.

More information about the Freeradius-Users mailing list